de8f56be8f22ee8c9da804c73ffd85db9e6fcbcf6cc13aa6b785499cecc5898d

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/06/2026, 11:39

Target
2026-06-06_4a95163c9554c8e7208059f540073276_cloudeye_cobalt-strike_elex_icedid_njrat_vidar.exe
Size 753KB
Sample260606-nsr5pscy21
SHA256 de8f56be8f22ee8c9da804c73ffd85db9e6fcbcf6cc13aa6b785499cecc5898d
MD5 4a95163c9554c8e7208059f540073276
SHA1 5233bfef82e568ecf07fc949a6380076bd7ecc37
SHA512 5a2a73ccf6e0e6adf94ce241b3d0ad31eb62b50f4e6e4b0a923f4dfd08583630e1b44c29bd72138672e1891739897c0fc2a3688f268fe40faa3bb12f6327f389
SSDEEP 12288:EixUrHGQVL9vwf+YV8qN+l5Y5s8l3t5vQJAdG:nxal9vGjWIdd5oJ+
TLSH
T17EF47C27F39514FCE86AD13887565522FA31BC590730AAEF23945B213F766E06B3EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3168	4208	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\2026-06-06_4a95163c9554c8e7208059f540073276_cloudeye_cobalt-strike_elex_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-06_4a95163c9554c8e7208059f540073276_cloudeye_cobalt-strike_elex_icedid_njrat_vidar.exe"
1⤵
PID:4208
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4208 -s 8
  2⤵
  - Program crash
  PID:3168

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4208 -ip 4208
1⤵
PID:2116